{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,10]],"date-time":"2025-09-10T22:32:16Z","timestamp":1757543536625,"version":"3.40.3"},"publisher-location":"Cham","reference-count":51,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030883225"},{"type":"electronic","value":"9783030883232"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-88323-2_7","type":"book-chapter","created":{"date-parts":[[2021,10,17]],"date-time":"2021-10-17T12:10:22Z","timestamp":1634472622000},"page":"129-148","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["SparrowHawk: Memory Safety Flaw Detection via Data-Driven Source Code Annotation"],"prefix":"10.1007","author":[{"given":"Yunlong","family":"Lyu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wang","family":"Gao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siqi","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qibin","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juanru","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,10,18]]},"reference":[{"key":"7_CR1","unstructured":"Clang Static Analyzer. http:\/\/clang-analyzer.llvm.org"},{"key":"7_CR2","unstructured":"Abadi, M., et al.: Tensorflow: A system for large-scale machine learning. In: Proceedings of the 12th USENIX Conference on Operating Systems Design and Implementation, pp. 265\u2013283. USENIX Association (2016)"},{"key":"7_CR3","unstructured":"Bromley, J., Guyon, I., LeCun, Y., S\u00e4ckinger, E., Shah, R.: Signature verification using a \u201csiamese\u201d time delay neural network. In: Proceedings of the 6th International Conference on Neural Information Processing Systems, pp. 737\u2013744. Morgan Kaufmann Publishers Inc (1993)"},{"key":"7_CR4","unstructured":"brown, F., Deian, S., Dawson, E.: Sys: A static\/symbolic tool for finding good bugs in good (browser) code. In: 29th USENIX Security Symposium (USENIX Security 20), pp. 199\u2013216. USENIX Association (2020)"},{"key":"7_CR5","unstructured":"Busybox. https:\/\/github.com\/mirror\/busybox"},{"key":"7_CR6","unstructured":"Clang. https:\/\/clang.llvm.org\/"},{"key":"7_CR7","unstructured":"Cpython. https:\/\/github.com\/python\/cpython"},{"key":"7_CR8","unstructured":"Curl. https:\/\/github.com\/curl\/curl"},{"key":"7_CR9","unstructured":"Dam, H.K., Tran, T., Pham, T., Ng, S.W., Grundy, J., Ghose, A.: Automatic feature learning for vulnerability prediction. arXiv:1708.02368 (2017)"},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Duan, X., et al.: Vulsniper: Focus your attention to shoot fine-grained vulnerabilities. In: Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence, IJCAI-19, pp. 4665\u20134671. International Joint Conferences on Artificial Intelligence Organization (2019)","DOI":"10.24963\/ijcai.2019\/648"},{"key":"7_CR11","unstructured":"Ffmpeg. https:\/\/github.com\/FFmpeg\/FFmpeg"},{"key":"7_CR12","doi-asserted-by":"crossref","unstructured":"Gens, D., Schmitt, S., Davi, L., Sadeghi, A.R.: K-miner: Uncovering memory corruption in linux. (2018)","DOI":"10.14722\/ndss.2018.23326"},{"key":"7_CR13","unstructured":"Gensim. https:\/\/radimrehurek.com\/gensim\/"},{"key":"7_CR14","unstructured":"Git. https:\/\/github.com\/git\/git"},{"key":"7_CR15","unstructured":"Gnutls. https:\/\/gitlab.com\/gnutls\/gnutls\/"},{"key":"7_CR16","unstructured":"Google web trillion word corpus. http:\/\/googleresearch.blogspot.com\/2006\/08\/all-our-n-gram-are-belong-to-you.html"},{"key":"7_CR17","unstructured":"Graphicsmagick. http:\/\/www.graphicsmagick.org\/"},{"key":"7_CR18","unstructured":"Gravity. https:\/\/github.com\/marcobambini\/gravity"},{"key":"7_CR19","doi-asserted-by":"publisher","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","volume":"9","author":"S Hochreiter","year":"1997","unstructured":"Hochreiter, S., Schmidhuber, J.: Long short-term memory. Neural Comput. 9, 1735\u20131780 (1997)","journal-title":"Neural Comput."},{"key":"7_CR20","unstructured":"Imagemagick. https:\/\/github.com\/ImageMagick\/ImageMagick"},{"key":"7_CR21","unstructured":"Li, Y., Tarlow, D., Brockschmidt, M., Zemel, R.: Gated graph sequence neural networks. arXiv:1511.05493 (2017)"},{"key":"7_CR22","doi-asserted-by":"publisher","first-page":"1091","DOI":"10.1109\/TPAMI.2007.1078","volume":"29","author":"Y Li","year":"2007","unstructured":"Li, Y., Liu, B.: A normalized levenshtein distance metric. IEEE Trans. Pattern Anal. Mach. Intell. 29, 1091\u20131095 (2007)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"7_CR23","doi-asserted-by":"publisher","first-page":"103184","DOI":"10.1109\/ACCESS.2019.2930578","volume":"7","author":"Z Li","year":"2019","unstructured":"Li, Z., Zou, D., Tang, J., Zhang, Z., Sun, M., Jin, H.: A comparative study of deep learning-based vulnerability detection system. IEEE Access 7, 103184\u2013103197 (2019)","journal-title":"IEEE Access"},{"key":"7_CR24","doi-asserted-by":"crossref","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Qi, H., Hu, J.: Vulpecker: an automated vulnerability detection system based on code similarity analysis. In: Proceedings of the 32nd Annual Conference on Computer Security Applications, pp. 201\u2013213 (2016)","DOI":"10.1145\/2991079.2991102"},{"key":"7_CR25","unstructured":"Li, Z., Zou, D., Xu, S., Jin, H., Zhu, Y., Chen, Z.: Sysevr: A framework for using deep learning to detect software vulnerabilities. arXiv:1807.06756 (2018)"},{"key":"7_CR26","doi-asserted-by":"crossref","unstructured":"Li, Z., et al.: Vuldeepecker: A deep learning-based system for vulnerability detection (2018)","DOI":"10.14722\/ndss.2018.23158"},{"key":"7_CR27","unstructured":"Libtiff. http:\/\/www.libtiff.org\/"},{"key":"7_CR28","doi-asserted-by":"publisher","unstructured":"Ma, S., Thung, F., Lo, D., Sun, C., Deng, R.H.: Vurle: automatic vulnerability detection and repair by learning from examples. In: European Symposium on Research in Computer Security. pp. 229\u2013246. Springer (2017). https:\/\/doi.org\/10.1007\/978-3-319-66399-9_13","DOI":"10.1007\/978-3-319-66399-9_13"},{"key":"7_CR29","unstructured":"Machiry, A., Spensky, C., Corina, J., Stephens, N., Kruegel, C., Vigna, G.: DR. CHECKER: A soundy analysis for linux kernel drivers. In: 26th USENIX Security Symposium (USENIX Security 17), pp. 1007\u20131024. USENIX Association (2017)"},{"key":"7_CR30","unstructured":"Mikolov, T., Sutskever, I., Chen, K., Corrado, G.S., Dean, J.: Distributed representations of words and phrases and their compositionality. Adv. Neural Inf. Process. Syst. 26, 3111\u20133119 (2013)"},{"key":"7_CR31","unstructured":"Mean squared error. https:\/\/en.wikipedia.org\/wiki\/Mean_squared_error"},{"key":"7_CR32","unstructured":"Openharmony. https:\/\/openharmony.gitee.com\/openharmony"},{"key":"7_CR33","doi-asserted-by":"crossref","unstructured":"Provilkov, I., Emelianenko, D., Voita, E.: BPE-dropout: Simple and effective subword regularization. In: Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics, pp. 1882\u20131892. Association for Computational Linguistics (2020)","DOI":"10.18653\/v1\/2020.acl-main.170"},{"key":"7_CR34","unstructured":"Ramos, D.A., Engler, D.: Under-constrained symbolic execution: Correctness checking for real code. In: 24th USENIX Security Symposium (USENIX Security 15), pp. 49\u201364. USENIX Association (2015)"},{"key":"7_CR35","doi-asserted-by":"crossref","unstructured":"Reimers, N., Gurevych, I.: Sentence-bert: sentence embeddings using siamese bert-networks. In: Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP), pp. 3982\u20133992. Association for Computational Linguistics (2019)","DOI":"10.18653\/v1\/D19-1410"},{"key":"7_CR36","doi-asserted-by":"crossref","unstructured":"Russell, R., et al.: Automated vulnerability detection in source code using deep representation learning. In: 2018 17th IEEE International Conference on Machine Learning and Applications (ICMLA), pp. 757\u2013762. IEEE (2018)","DOI":"10.1109\/ICMLA.2018.00120"},{"key":"7_CR37","doi-asserted-by":"crossref","unstructured":"Schwartz, E.J., Cohen, C.F., Duggan, M., Gennari, J., Havrilla, J.S., Hines, C.: Using logic programming to recover C++ classes and methods from compiled executables. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS) (2018)","DOI":"10.1145\/3243734.3243793"},{"key":"7_CR38","doi-asserted-by":"crossref","unstructured":"Sennrich, R., Haddow, B., Birch, A.: Neural machine translation of rare words with subword units. In: Proceedings of the 54th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pp. 1715\u20131725. Association for Computational Linguistics (2016)","DOI":"10.18653\/v1\/P16-1162"},{"key":"7_CR39","doi-asserted-by":"crossref","unstructured":"Shen, Z., Chen, S.: A survey of automatic software vulnerability detection, program repair, and defect prediction techniques. Security and Communication Networks 2020 (2020)","DOI":"10.1155\/2020\/8858010"},{"key":"7_CR40","unstructured":"Stackexchange archive site. https:\/\/archive.org\/download\/stackexchange\/stackoverflow.com-Posts.7z"},{"key":"7_CR41","unstructured":"Stackoverflow forum. https:\/\/stackoverflow.com\/"},{"key":"7_CR42","doi-asserted-by":"crossref","unstructured":"Sui, Y., Xue, J.: Svf: Interprocedural static value-flow analysis in LLVM. In: Proceedings of the 25th International Conference on Compiler Construction, pp. 265\u2013266. Association for Computing Machinery (2016)","DOI":"10.1145\/2892208.2892235"},{"key":"7_CR43","unstructured":"Tokenizers. https:\/\/github.com\/huggingface\/tokenizers"},{"key":"7_CR44","unstructured":"Vaswani, A., et al.: Attention is all you need. In: Advances in Neural Information Processing Systems 30, pp. 5998\u20136008 (2017)"},{"key":"7_CR45","unstructured":"Vim. https:\/\/github.com\/vim\/vim"},{"key":"7_CR46","unstructured":"Wang, J., et al.: Nlp-eye: Detecting memory corruptions via semantic-aware memory operation function identification. In: 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019), pp. 309\u2013321. USENIX Association (2019)"},{"key":"7_CR47","doi-asserted-by":"crossref","unstructured":"Yamaguchi, F., Golde, N., Arp, D., Rieck, K.: Modeling and discovering vulnerabilities with code property graphs. In: 2014 IEEE Symposium on Security and Privacy, pp. 590\u2013604. IEEE (2014)","DOI":"10.1109\/SP.2014.44"},{"key":"7_CR48","doi-asserted-by":"crossref","unstructured":"Yan, H., Sui, Y., Chen, S., Xue, J.: Spatio-temporal context reduction: a pointer-analysis-based static approach for detecting use-after-free vulnerabilities. In: 2018 IEEE\/ACM 40th International Conference on Software Engineering (ICSE), pp. 327\u2013337. IEEE (2018)","DOI":"10.1145\/3180155.3180178"},{"key":"7_CR49","doi-asserted-by":"crossref","unstructured":"Zhai, Y., yzhai: Ubitect: a precise and scalable method to detect use-before-initialization bugs in linux kernel. In: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC\/FSE 2020). ACM (2020)","DOI":"10.1145\/3368089.3409686"},{"key":"7_CR50","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Ma, S., Li, J., Li, K., Nepal, S., Gu, D.: Smartshield: automatic smart contract protection made easy. In: 2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), pp. 23\u201334. IEEE (2020)","DOI":"10.1109\/SANER48275.2020.9054825"},{"key":"7_CR51","unstructured":"Zhou, Y., Liu, S., Siow, J., Du, X., Liu, Y.: Devign: effective vulnerability identification by learning comprehensive program semantics via graph neural networks. Adv. Neural Inf. Process. Syst. 32, 10197\u201310207 (2019)"}],"container-title":["Lecture Notes in Computer Science","Information Security and Cryptology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-88323-2_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,10]],"date-time":"2022-04-10T21:18:18Z","timestamp":1649625498000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-88323-2_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030883225","9783030883232"],"references-count":51,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-88323-2_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"18 October 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Inscrypt","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security and Cryptology","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 August 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 August 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"17","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cisc2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/cst.qd.sdu.edu.cn\/inscrypt_2021\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Hotcrp","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"81","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"28","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"35% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}